Question 1

In a walkthrough,hackers are able to bypass security controls of a system with little opposition.

Accepted Answer

A) True 
 B)False

Question 2

Currently,the protocols used for secure information transfer over the Internet are

Accepted Answer

A)  TCP/IP and SSL. 
B)  S-HTTP and CA. 
C)  HTTP and TCP/IP. 
D)  SSL, TLS, and S-HTTP.

Question 3

You have been hired as a security consultant for a law firm.Which of the following constitutes the greatest source of security threats to the firm?

Accepted Answer

A)  wireless network 
B)  employees 
C)  authentication procedures 
D)  lack of data encryption

Question 4

Application controls

Accepted Answer

A)  can be classified as input controls, processing controls, and output controls. 
B)  govern the design, security, and use of computer programs and the security of data files in general throughout the organization. 
C)  apply to all computerized applications and consist of a combination of hardware, software, and manual procedures that create an overall control environment. 
D)  include software controls, computer operations controls, and implementation controls.

Question 5

Three major concerns of system builders and users are disaster,security,and human error.Of the three,which do you think is most difficult to deal with? Why?

Accepted Answer

The answer of Three major concerns of system builders and...

Question 6

A ___________________________ is typically used to denote a hacker with criminal intent.

Accepted Answer

A)  hacker 
B)  cracker 
C)  fracker 
D)  jacker

Question 7

Which of the following is not an example of a computer used as an instrument of crime?

Accepted Answer

A)  theft of trade secrets 
B)  intentionally attempting to intercept electronic communication 
C)  unauthorized copying of software 
D)  breaching the confidentiality of protected computerized data

Question 8

Computers using cable modems to connect to the Internet are more open to penetration than those connecting via dial-up.

Accepted Answer

A) True 
 B)False

Question 9

A(n)________ system is used to identify and authorize different categories of system users and specify which portions of the organization's systems each user can access.

Accepted Answer

A)  identity management 
B)  AUP 
C)  authentication 
D)  firewall

Question 10

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Accepted Answer

The answer of ________ is a crime in which an...

Question 11

Wireless networks in many locations do not have basic protections against war driving in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic.

Accepted Answer

A) True 
 B)False

Question 12

Cyber vandalism occurs when an individual or computer program fraudulently clicks on an online ad without any intention of learning more about the advertiser or making a purchase.

Accepted Answer

A) True 
 B)False

Question 13

___________________________ ensure that computer hardware is physically secure and check for equipment malfunction.

Accepted Answer

A)  Software controls 
B)  Hardware controls 
C)  Computer operations controls 
D)  Data security controls

Question 14

Controls refers to the policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Accepted Answer

A) True 
 B)False

Question 15

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Accepted Answer

The answer of Why is software quality important to security?...

Question 16

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

Accepted Answer

A) True 
 B)False

Question 17

Malicious software programs referred to as ________ include a variety of threats such as computer viruses,worms,and Trojan horses.

Accepted Answer

The answer of Malicious software programs referred to as ________...

Question 18

Define a fault-tolerant computer system and a high-availability computer system.How do they differ? When would each be used?

Accepted Answer

The answer of Define a fault-tolerant computer system and a...

Question 19

________ refers to policies,procedures,and technical measures used to prevent unauthorized access,alternation,theft,or physical damage to information systems.

Accepted Answer

A)  "Security" 
B)  "Controls" 
C)  "Benchmarking" 
D)  "Algorithms"

Question 20

__________________________ are independent computer programs that copy themselves from one computer to other computers over a network.

Accepted Answer

The answer of __________________________ are independent computer programs that copy...

Exam 8: Securing Information Systems

In a walkthrough,hackers are able to bypass security controls of a system with little opposition.

Currently,the protocols used for secure information transfer over the Internet are

You have been hired as a security consultant for a law firm.Which of the following constitutes the greatest source of security threats to the firm?

Application controls

Three major concerns of system builders and users are disaster,security,and human error.Of the three,which do you think is most difficult to deal with? Why?

A ___________________________ is typically used to denote a hacker with criminal intent.

Which of the following is not an example of a computer used as an instrument of crime?

Computers using cable modems to connect to the Internet are more open to penetration than those connecting via dial-up.

A(n) ________ system is used to identify and authorize different categories of system users and specify which portions of the organization's systems each user can access.

________ is a crime in which an imposter obtains key pieces of personal information to impersonate someone else.

Wireless networks in many locations do not have basic protections against war driving in which eavesdroppers drive by buildings or park outside and try to intercept wireless network traffic.

Cyber vandalism occurs when an individual or computer program fraudulently clicks on an online ad without any intention of learning more about the advertiser or making a purchase.

___________________________ ensure that computer hardware is physically secure and check for equipment malfunction.

Controls refers to the policies,procedures,and technical measures used to prevent unauthorized access,alteration,theft,or physical damage to information systems.

Why is software quality important to security? What specific steps can an organization take to ensure software quality?

Biometric authentication is the use of physical characteristics such as retinal images to provide identification.

Malicious software programs referred to as ________ include a variety of threats such as computer viruses,worms,and Trojan horses.

Define a fault-tolerant computer system and a high-availability computer system.How do they differ? When would each be used?

________ refers to policies,procedures,and technical measures used to prevent unauthorized access,alternation,theft,or physical damage to information systems.

__________________________ are independent computer programs that copy themselves from one computer to other computers over a network.